1.Which of the following statements are true regarding hashing? (Choose two)
A. Changing 1 bit of the input SHA-1 changes 1 bit of the output.
B. SHA-1 is stronger than MD5 because it can be used with a key to prevent modification.
C. MD5 produces a 160-bit result.
D. MD5 takes more CPU cycles to compute than SHA-1.
E. SHA-256 is an extension to SHA-1 with a longer output.
Answer: BE
Explanation:
a is wrong: changing one bit change the whole hash
b is wrong because both don’t use a key for hash
c is wrong because md5 is 128bit
c is wrong MD5 is somewhat less CPU-intensive
d is wrong because sha-256 is based on sha 2 not sha 1

3.What Cisco IOS feature prevents an attacker from filling up the MTU cache for locally generated traffic
when using path MTU discovery?
A. Use NetFlow information to export data to a workstation.
B. Force all traffic to send 1280-byte Packets by hard coding the MSS.
C. Enable flow-label marking to track packet destination.
D. Enable flow-label switching to track IPv6 packets in the MPLS cloud.
E. Always use packets of 1500-byte size or larger.
Answer: C
Explanation:
How to Configure IPv6 MTU Path Discovery
Enabling Flow-Label Marking in Packets that Originate from the Device
Enabling Flow-Label Marking in Packets that Originate from the Device
This feature allows the device to track destinations to which the device has sent packets that are 1280
bytes or larger.
Seems we are talking here about Path MTU discovery: in IPv6 it allows a host to dynamically discover and
adjust to differences in the MTU size of every link along a given data path.
Enabling Flow-Label Marking in Packets that Originate from the Device
This feature allows the device to track destinations to which the device has sent packets that are 1280
bytes or larger.
SUMMARY STEPS
1. enable
2. configure terminal
3. ipv6 flowset
4. exit
5. clear ipv6 mtu